🇧🇷
ICS Labs
2026-11-13 16:48:18
UTC ·
(2 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-11-13 UTC.
Brute-Force
Exploited Host
🇫🇷
SpaceHost-Server
2026-11-12 23:17:49
UTC ·
(2 days ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 16:43:23
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 190.5.48.101 (190-5-48-101.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:43:16.555473 2026] [security2:error] [pid 29511:tid 29511 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.48.101 (190-5-48-101.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:43:16.555473 2026] [security2:error] [pid 29511:tid 29511] [client 190.5.48.101:16346] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||indoorsfinishing.com.saadeh.ws|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "indoorsfinishing.com.saadeh.ws"] [uri "/wp-json/wp/v2/users"] [unique_id "avXspIZ1TJ7AC6U1VPHtLgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-11-12 16:25:17
UTC ·
(3 days ago)
WP Authentication attempt for unknown user
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:29:30
UTC ·
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 190.5.48.101 (190-5-48-101.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:29:26.479369 2026] [security2:error] [pid 20606:tid 20606 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.48.101 (190-5-48-101.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:29:26.479369 2026] [security2:error] [pid 20606:tid 20606] [client 190.5.48.101:14692] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dennisangellismusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dennisangellismusic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avXbVusD6EYvMEfg17rWFgAAAAA"], referer: https://dennisangellismusic.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 16:05:56
UTC ·
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 190.5.48.101 (190-5-48-101.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:05:48.581638 2026] [security2:error] [pid 5174:tid 5264] ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.48.101 (190-5-48-101.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:05:48.581638 2026] [security2:error] [pid 5174:tid 5264] [client 190.5.48.101:14258] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||luxury.management|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "luxury.management"] [uri "/wp-json/wp/v2/users"] [unique_id "avNA3FI_yFApnINUZFXoRwAAAZQ"], referer: http://luxury.management/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-27 21:16:31
UTC ·
(2 weeks ago)
Try to access /xmlrpc.php
Web App Attack
🇳🇿
Tripwire
2026-10-23 15:13:04
UTC ·
(3 weeks ago)
Wordpress login attempts
Brute-Force
Web App Attack
🇲🇹
Malta
2026-10-18 20:03:48
UTC ·
(4 weeks ago)
190.5.48.101 - - [18/Oct/2026:22:03:48 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇲🇽
octageeks.com
2026-10-10 04:32:16
UTC ·
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
Hazzard
2026-10-06 05:31:38
UTC ·
(1 month ago)
(wordpress) Failed wordpress login from 190.5.48.101 (CL/Chile/Maule Region/Talca/190-5-48-101.static.pacificored.cl/[redacted]): (CF_ENABLE)
Brute-Force
2025-12-22 14:07:03
UTC ·
(10 months ago)
apache vulnerability scan
Web App Attack
🇺🇦
URAN Publishing Service
2024-03-03 15:50:07
UTC ·
(2 years ago)
190.5.48.101 - - [03/Mar/2024:17:48:49 +0200] "GET /wp-login.php HTTP/1.1" 404 4782 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
190.5.48.101 - - [03/Mar/2024:17:50:05 +0200] "GET /wp-login.php HTTP/1.1" 404 366 "-" "Mo ...
show more
190.5.48.101 - - [03/Mar/2024:17:48:49 +0200] "GET /wp-login.php HTTP/1.1" 404 4782 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
190.5.48.101 - - [03/Mar/2024:17:50:05 +0200] "GET /wp-login.php HTTP/1.1" 404 366 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2024-02-24 02:52:40
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 190.5.48.101 (190-5-48-101.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 23 21:52:37.004029 2024] [security2:error] [pid 9369] [client 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.48.101 (190-5-48-101.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 23 21:52:37.004029 2024] [security2:error] [pid 9369] [client 190.5.48.101:10963] [client 190.5.48.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.grasslakepizzatime.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.grasslakepizzatime.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZdlZ9OVybbON3QO2JAHbbQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-12 04:33:14
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 190.5.48.101 (190-5-48-101.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 11 23:33:10.492270 2024] [security2:error] [pid 12539] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 190.5.48.101 (190-5-48-101.static.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 11 23:33:10.492270 2024] [security2:error] [pid 12539] [client 190.5.48.101:10509] [client 190.5.48.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||persnicketyinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "persnicketyinc.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZcmfhpygjpULxVLz2DXHvAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
